# Security

How AvianSuite protects your data and your agents' writes.

## How your data is kept

History Append-only. Nothing an agent writes is edited or deleted in place; corrections are new entries.

Tamper-evident Every event is fingerprinted and linked to the one before it, so a rewritten or rolled-back history shows up. [How that works](https://aviansuite.com/tech/).

Encryption The contents of every event are encrypted with AES-GCM before they are stored.

Isolation Each store runs as its own Stellar Jay process with its own data key and credentials.

Attribution Every write is tied to the credential that made it. Credentials carry reader, writer or admin roles.

Open source The store is public under AGPL-3.0-or-later, so you can inspect it or run it yourself. [Stellar Jay on GitHub](https://github.com/kyle-visner/stellarjay).

## Reporting an issue

Found a security problem? Email [kyle@futureperfect.work](mailto:kyle@futureperfect.work). Please don't open a public issue for it.

---
What AvianSuite does to keep your data and your agents' writes safe: append-only, tamper-evident history, AES-GCM encryption, isolated stores and attributed writes.

AvianSuite is made by Future Perfect, LLC ([about](https://aviansuite.com/about/)). Contact: kyle@futureperfect.work. [Terms](https://aviansuite.com/terms/) · [Privacy](https://aviansuite.com/privacy/) · [Security](https://aviansuite.com/security/) · [Pricing](https://aviansuite.com/pricing/) · [Answers to common questions](https://aviansuite.com/answers/)